Lucene search
HistoryJan 30, 2018 - 5:29 p.m.
CVE-2014-4705
cve-2014-4705
esap
huawei
buffer overflow
denial of service
security
vulnerability
nvd
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.4 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.4%
Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers allow remote attackers to cause a denial of service (device restart) via a crafted length field in a packet.
Affected configurations
Node
huaweis9300Match-
huaweis9300_firmwareMatchv200r001c00spc300
ORhuaweis9300_firmwareMatchv200r002c00spc100
ORhuaweis9300_firmwareMatchv200r003c00spc500
Node
huaweis9700_firmwareMatchv200r001c00spc300
ORhuaweis9700_firmwareMatchv200r002c00spc100
ORhuaweis9700_firmwareMatchv200r003c00spc500
huaweis9700Match-
Node
huaweis7700_firmwareMatchv200r001c00spc300
ORhuaweis7700_firmwareMatchv200r002c00spc100
ORhuaweis7700_firmwareMatchv200r003c00spc500
huaweis7700Match-
Node
huaweis5300_firmwareMatchv200r001c00spc300
ORhuaweis5300_firmwareMatchv200r002c00spc100
ORhuaweis5300_firmwareMatchv200r003c00spc300
huaweis5300Match-
Node
huaweis5700_firmwareMatchv200r001c00spc300
ORhuaweis5700_firmwareMatchv200r002c00spc100
ORhuaweis5700_firmwareMatchv200r003c00spc300
huaweis5700Match-
Node
huaweis6300_firmwareMatchv200r001c00spc300
ORhuaweis6300_firmwareMatchv200r002c00spc100
ORhuaweis6300_firmwareMatchv200r003c00spc300
huaweis6300Match-
Node
huaweis6700_firmwareMatchv200r001c00spc300
ORhuaweis6700_firmwareMatchv200r002c00spc100
ORhuaweis6700_firmwareMatchv200r003c00spc300
huaweis6700Match-
Node
huaweiar150_firmwareMatchv200r003c00spc100
ORhuaweiar150_firmwareMatchv200r003c00spc200
ORhuaweiar150_firmwareMatchv200r003c01spc100
ORhuaweiar150_firmwareMatchv200r003c01spc300
ORhuaweiar150_firmwareMatchv200r003c01spc900
ORhuaweiar150_firmwareMatchv200r005c00spc100
ORhuaweiar150_firmwareMatchv200r005c00spc200
huaweiar150Match-
Node
huaweiar160_firmwareMatchv200r003c00spc100
ORhuaweiar160_firmwareMatchv200r003c00spc200
ORhuaweiar160_firmwareMatchv200r003c01spc100
ORhuaweiar160_firmwareMatchv200r003c01spc300
ORhuaweiar160_firmwareMatchv200r003c01spc900
ORhuaweiar160_firmwareMatchv200r005c00spc100
ORhuaweiar160_firmwareMatchv200r005c00spc200
huaweiar160Match-
Node
huaweiar200_firmwareMatchv200r003c00spc100
ORhuaweiar200_firmwareMatchv200r003c00spc200
ORhuaweiar200_firmwareMatchv200r003c01spc100
ORhuaweiar200_firmwareMatchv200r003c01spc300
ORhuaweiar200_firmwareMatchv200r003c01spc900
ORhuaweiar200_firmwareMatchv200r005c00spc100
ORhuaweiar200_firmwareMatchv200r005c00spc200
huaweiar200Match-
Node
huaweiar1200_firmwareMatchv200r003c00spc100
ORhuaweiar1200_firmwareMatchv200r003c00spc200
ORhuaweiar1200_firmwareMatchv200r003c01spc100
ORhuaweiar1200_firmwareMatchv200r003c01spc300
ORhuaweiar1200_firmwareMatchv200r003c01spc900
ORhuaweiar1200_firmwareMatchv200r005c00spc100
ORhuaweiar1200_firmwareMatchv200r005c00spc200
huaweiar1200Match-
Node
huaweiar2200_firmwareMatchv200r003c00spc100
ORhuaweiar2200_firmwareMatchv200r003c00spc200
ORhuaweiar2200_firmwareMatchv200r003c01spc100
ORhuaweiar2200_firmwareMatchv200r003c01spc300
ORhuaweiar2200_firmwareMatchv200r003c01spc900
ORhuaweiar2200_firmwareMatchv200r005c00spc100
ORhuaweiar2200_firmwareMatchv200r005c00spc200
huaweiar2200Match-
Node
huaweiar3200_firmwareMatchv200r003c00spc100
ORhuaweiar3200_firmwareMatchv200r003c00spc200
ORhuaweiar3200_firmwareMatchv200r003c01spc100
ORhuaweiar3200_firmwareMatchv200r003c01spc300
ORhuaweiar3200_firmwareMatchv200r003c01spc900
ORhuaweiar3200_firmwareMatchv200r005c00spc100
ORhuaweiar3200_firmwareMatchv200r005c00spc200
huaweiar3200Match-
Node
huaweiar530Match-
huaweiar530_firmwareMatchv200r003c00spc100
ORhuaweiar530_firmwareMatchv200r003c00spc200
ORhuaweiar530_firmwareMatchv200r003c01spc100
ORhuaweiar530_firmwareMatchv200r003c01spc300
ORhuaweiar530_firmwareMatchv200r003c01spc900
ORhuaweiar530_firmwareMatchv200r005c00spc100
ORhuaweiar530_firmwareMatchv200r005c00spc200
Node
huaweinetengine16exMatch-
huaweinetengine16ex_firmwareMatchv200r003c00spc100
ORhuaweinetengine16ex_firmwareMatchv200r003c00spc200
ORhuaweinetengine16ex_firmwareMatchv200r003c01spc100
ORhuaweinetengine16ex_firmwareMatchv200r003c01spc300
ORhuaweinetengine16ex_firmwareMatchv200r003c01spc900
ORhuaweinetengine16ex_firmwareMatchv200r005c00spc100
ORhuaweinetengine16ex_firmwareMatchv200r005c00spc200
Node
huaweisrg1300Match-
huaweisrg1300_firmwareMatchv200r003c00spc100
ORhuaweisrg1300_firmwareMatchv200r003c00spc200
ORhuaweisrg1300_firmwareMatchv200r003c01spc100
ORhuaweisrg1300_firmwareMatchv200r003c01spc300
ORhuaweisrg1300_firmwareMatchv200r003c01spc900
ORhuaweisrg1300_firmwareMatchv200r005c00spc100
ORhuaweisrg1300_firmwareMatchv200r005c00spc200
Node
huaweisrg2300Match-
huaweisrg2300_firmwareMatchv200r003c00spc100
ORhuaweisrg2300_firmwareMatchv200r003c00spc200
ORhuaweisrg2300_firmwareMatchv200r003c01spc100
ORhuaweisrg2300_firmwareMatchv200r003c01spc300
ORhuaweisrg2300_firmwareMatchv200r003c01spc900
ORhuaweisrg2300_firmwareMatchv200r005c00spc100
ORhuaweisrg2300_firmwareMatchv200r005c00spc200
Node
huaweisrg3300Match-
huaweisrg3300_firmwareMatchv200r003c00spc100
ORhuaweisrg3300_firmwareMatchv200r003c00spc200
ORhuaweisrg3300_firmwareMatchv200r003c01spc100
ORhuaweisrg3300_firmwareMatchv200r003c01spc300
ORhuaweisrg3300_firmwareMatchv200r003c01spc900
ORhuaweisrg3300_firmwareMatchv200r005c00spc100
ORhuaweisrg3300_firmwareMatchv200r005c00spc200
Node
huaweiwlan_ac6005_firmwareMatchv200r003c00spc100
ORhuaweiwlan_ac6005_firmwareMatchv200r003c00spc200
ORhuaweiwlan_ac6005_firmwareMatchv200r003c00spc300
ORhuaweiwlan_ac6005_firmwareMatchv200r003c00spc500
ORhuaweiwlan_ac6005_firmwareMatchv200r005c00spc100
huaweiwlan_ac6005Match-
Node
huaweiwlan_ac6605Match-
huaweiwlan_ac6605_firmwareMatchv200r003c00spc100
ORhuaweiwlan_ac6605_firmwareMatchv200r003c00spc200
ORhuaweiwlan_ac6605_firmwareMatchv200r003c00spc300
ORhuaweiwlan_ac6605_firmwareMatchv200r003c00spc500
ORhuaweiwlan_ac6605_firmwareMatchv200r005c00spc100
Node
huaweiwlan_acu2Match-
huaweiwlan_acu2_firmwareMatchv200r005c00spc100
Related
prion
prion
Heap overflow
2018-01-30 17:29:00
nvd
nvd
CVE-2014-4705
2018-01-30 17:29:00
nessus
nessus
Huawei eSap Platform DoS (HWPSIRT-2014-0111)
2014-07-25 00:00:00
cvelist
cvelist
CVE-2014-4705
2018-01-30 17:00:00
huawei
huawei
Security Advisory-Heap Overflow Vulnerability in Huawei eSap Platform
2014-06-16 00:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.4 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.4%
Related for CVE-2014-4705